This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer File: vp7oIiPwQFhr4922qq9lXplCkSY.cer (raw, json) Hash identifier: ZBbthH5+zoU5ZFspYJnxcTRx8DxbovKZllWaGCtHeoo= Subject key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A277C05B73AE17F7F5883CB547591C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.33.50.0/24 IP: 2a09:b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:77:c0:5b:73:ae:17:f7:f5:88:3c:b5:47:59:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be9ee82223f040586be3ddb6aaaf655e99429126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0c:6d:eb:ef:80:c1:0c:1f:ca:7d:cd:6d:94: 76:ef:21:09:01:ad:f3:22:1a:4f:12:e0:75:e5:e8: 0c:14:1c:6f:10:4a:dc:2d:49:3c:22:56:2e:db:56: be:13:75:cf:34:c9:b2:0a:6f:7a:0e:75:9d:76:51: be:8e:03:ee:6f:43:4b:8a:16:17:be:ec:1b:4b:3c: 97:f8:2e:44:c8:c9:ed:4f:b5:b2:d9:02:2f:12:75: 7a:4a:8c:47:ed:ab:10:af:25:1b:0c:23:41:27:40: f1:02:96:c8:d7:02:d3:ba:32:b3:e8:f4:81:55:82: 43:d8:5c:6d:06:83:a6:4f:91:f9:be:b4:0b:7a:a9: 2e:0f:02:db:5c:b3:07:ae:a0:1f:c3:e4:55:40:a2: df:44:89:28:2b:79:5a:70:f3:aa:ba:48:da:85:d1: ae:38:60:44:a3:bd:ca:10:b6:00:07:39:6d:88:7e: b0:0d:3f:64:47:aa:3d:f4:d2:5f:f9:eb:f7:ad:f8: af:d4:97:13:fc:e9:8d:dd:df:ba:06:46:b2:fb:03: 41:83:f8:89:e5:30:09:94:e4:99:ea:2f:e1:2e:a0: c1:67:02:e4:0b:14:70:0e:41:46:20:0f:56:0d:98: 6b:34:cc:e2:2a:ae:13:b2:c9:10:44:00:fa:1e:72: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.50.0/24 IPv6: 2a09:b00::/29 Signature Algorithm: sha256WithRSAEncryption 2f:49:43:e0:05:b3:dc:ba:73:e3:90:25:1d:6e:42:9d:1f:ab: 34:2e:58:9b:a8:d8:61:8c:c3:88:8d:ac:b3:23:66:31:09:65: e1:8f:16:1c:0d:46:73:d9:ae:05:b0:2f:f9:cf:38:13:5d:e4: 6e:ec:a3:3b:b1:32:ab:4f:6f:ba:4b:8e:3e:e5:86:1a:22:46: 4f:55:be:9d:c0:16:52:4c:33:04:c6:ea:e8:41:20:4a:a5:8e: 4c:34:dc:93:8f:36:7f:ff:e9:7a:0e:69:e1:31:b7:da:83:ff: 13:16:ff:c9:93:d2:8e:6b:67:32:98:9b:1b:54:1a:1d:0b:eb: e1:09:0a:22:e1:c0:a1:ba:99:08:d8:05:ac:1f:89:f5:6a:19: 41:a6:84:70:e9:f1:34:6d:71:ef:da:95:93:76:e3:f5:c1:d0: 5b:20:ba:12:bf:95:db:4f:cb:e2:2c:d1:2b:ee:49:9f:24:2f: 28:c4:c2:76:a5:41:42:3b:ff:53:45:87:82:bd:e6:ca:8e:f2: f4:fa:ec:44:d2:75:c3:52:c6:46:1f:6b:c5:38:5f:68:91:ca: 2c:82:e1:26:a7:a5:c9:5d:c1:12:eb:50:49:63:a6:6d:da:7b: d3:00:9a:ac:a5:30:f4:36:e1:49:26:76:20:4f:dc:e5:6a:99: 1b:7c:3a:09 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4onfAW3OuF/f1iDy1R1kcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTllZTgyMjIzZjA0MDU4NmJlM2RkYjZhYWFmNjU1ZTk5NDI5MTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Qxt6++AwQwfyn3NbZR27yEJAa3z IhpPEuB15egMFBxvEErcLUk8IlYu21a+E3XPNMmyCm96DnWddlG+jgPub0NLihYX vuwbSzyX+C5EyMntT7Wy2QIvEnV6SoxH7asQryUbDCNBJ0DxApbI1wLTujKz6PSB VYJD2FxtBoOmT5H5vrQLeqkuDwLbXLMHrqAfw+RVQKLfRIkoK3lacPOqukjahdGu OGBEo73KELYABzltiH6wDT9kR6o99NJf+ev3rfiv1JcT/OmN3d+6Bkay+wNBg/iJ 5TAJlOSZ6i/hLqDBZwLkCxRwDkFGIA9WDZhrNMziKq4TsskQRAD6HnLOFQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFL6e6CIj8EBYa+PdtqqvZV6ZQpEmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzMyN2M0 Ni01N2VlLTRmMmYtOTg5ZC0yOGMwZTdkZjE2YTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMzI3YzQ2 LTU3ZWUtNGYyZi05ODlkLTI4YzBlN2RmMTZhMy8xL3ZwN29JaVB3UUZocjQ5MjJx cTlsWHBsQ2tTWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwiEyMA0EAgACMAcDBQMqCQsAMA0GCSqGSIb3 DQEBCwUAA4IBAQAvSUPgBbPcunPjkCUdbkKdH6s0LlibqNhhjMOIjayzI2YxCWXh jxYcDUZz2a4FsC/5zzgTXeRu7KM7sTKrT2+6S44+5YYaIkZPVb6dwBZSTDMExuro QSBKpY5MNNyTjzZ//+l6DmnhMbfag/8TFv/Jk9KOa2cymJsbVBodC+vhCQoi4cCh upkI2AWsH4n1ahlBpoRw6fE0bXHv2pWTduP1wdBbILoSv5XbT8viLNEr7kmfJC8o xMJ2pUFCO/9TRYeCvebKjvL0+uxE0nXDUsZGH2vFOF9okcosguEmp6XJXcES61BJ Y6Zt2nvTAJqspTD0NuFJJnYgT9zlapkbfDoJ -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:36 2026 by rpki-client